I am not aware, but to be honest, I am also not surprised. I am not sure why the info is worth selling/buying. I mean, I can totally understand that governments may want to surveil bitcoin and, in this effort, they will need to ask KYC exchanges for clients' info. But, who else would be interested in buying them and why? Marketing companies? Or anything more shady?
Not everyone on the internet does legal things, right? There are always some bad people. You never know if your identity was used by a hacker or a bad person. You should consider reading
What happens when your identity is stolen -- real story || Avoid CEXs!. The identity of that guy was stolen somehow and he was in massive trouble for that.
You can also read
Coinbase Admits Its Former Data Provider Sold Client Data. We don't know what are they doing with those user's data. But, whenever you search for a user profile on the internet, you will find some full profiles of some citizens. How do you think those data were collected? I know some survey worker pretend to be USA citizen and use those data to make their profile.